Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

There appear to be some intermittent problems with our hosting company DNS. Is the following DNS response a valid CNAME response?

When proxied through home ISP and router this seems to flip intermittently between an NXDOMAIN response and a NOERROR + CNAME resolution. My hunch is that the correct behaviour when receiving NXDOMAIN and CNAME in a single response is undefined and I'm getting a different response based on the machines my query has gone through.


; <<>> DiG 9.5.1-P3 <<>>
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26592
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;       IN  A


.           3600    IN  SOA 0 10800 3600 604800 3600

;; Query time: 143 msec
;; WHEN: Tue Jul  6 09:00:01 2010
;; MSG SIZE  rcvd: 142
share|improve this question
up vote 1 down vote accepted

There's an ongoing debate in the IETF "DNSEXT" Working Group about the correct response to a query when the target of the CNAME does not exist and in other unusual circumstances.

In this case I believe the response is definitely incorrect. is authoritative for It should be returning NOERROR rather than NXDOMAIN when you ask for the A record.

This would indicate that although the specific (NAME,CLASS,TYPE) tuple doesn't exist, the name itself does.

The behaviour of a cache seeing the incorrect NXDOMAIN response is not well defined. Whilst some will follow the CNAME record regardless, other resolvers may decide that the whole domain doesn't exist.

share|improve this answer
Thanks for your response - it's great to have an independent verification of my reading and I don't dip into DNS in detail very often. – asparagino Jul 8 '10 at 11:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.